Skip to content
OpenAdvisories

Product · davedoesdev

python-jwt

1 known vulnerabilities.

All Critical High Medium Low Exploited only

1 result · Feed

  • Critical 9.1
    CVE-2022-39227

    Python-jwt subject to Authentication Bypass by Spoofing

    python-jwt is a module for generating and verifying JSON Web Tokens. Versions prior to 3.3.4 are subject to Authentication Bypass by Spoofing, resulting in identity spoofing, session hijacking or authentication bypass. An attacker who obtains a JWT can arbitr…

    davedoesdev python-jwt python-jwt PyPI